Overview

overview

10

Static

static

9

9efcb531d4...84.exe

windows7_x64

10

9efcb531d4...84.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9efcb531d4ed1cd2d01f6d7ea4f743b78283f50efd81261a7ffb65ef931d4984

  • Size

    249KB

  • Sample

    220524-s5dv3acabl

  • MD5

    06c57423bd524418b88dd9f33dc9d14b

  • SHA1

    fc5d7d53efef62bc24285061399c8dc26327952d

  • SHA256

    9efcb531d4ed1cd2d01f6d7ea4f743b78283f50efd81261a7ffb65ef931d4984

  • SHA512

    d59c38ac4e1094fe766725a22265b9068f76b93f81a374ce6e47d56ba29ab2e77917c1c7d0b0b76262f885b6acc2b6b95ce7dbc6cbae8aab486ad351ff70eb8f

Score
10/10
gozi_rm390420251bankercryptonepackertrojan

Malware Config

Extracted

Family

gozi_rm3

Attributes
  • build

    300904

Extracted

Family

gozi_rm3

Botnet

90420251

C2

https://vvietnamnews.xyz

Attributes
  • build

    300904

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • non_target_locale

    RU

  • server_id

    12

  • url_path

    index.htm

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      9efcb531d4ed1cd2d01f6d7ea4f743b78283f50efd81261a7ffb65ef931d4984

    • Size

      249KB

    • MD5

      06c57423bd524418b88dd9f33dc9d14b

    • SHA1

      fc5d7d53efef62bc24285061399c8dc26327952d

    • SHA256

      9efcb531d4ed1cd2d01f6d7ea4f743b78283f50efd81261a7ffb65ef931d4984

    • SHA512

      d59c38ac4e1094fe766725a22265b9068f76b93f81a374ce6e47d56ba29ab2e77917c1c7d0b0b76262f885b6acc2b6b95ce7dbc6cbae8aab486ad351ff70eb8f

    Score
    10/10
    gozi_rm390420251bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks